The fix was to teach the ENA driver that "set the MTU to the value it already has" should be a no-op. With that change, the interface didn't bounce.